Wordfence

WordPress AI Engine Flaw (CVE-2025-5071): Critical Bug Allows Subscriber-Level Account Takeover

• Vulnerability Report

WordPress AI Engine Flaw (CVE-2025-5071): Critical Bug Allows Subscriber-Level Account Takeover

Do Son June 19, 2025 0

Security researchers at Wordfence have uncovered a vulnerability in the popular AI Engine plugin for WordPress, which...

Read More Read more about WordPress AI Engine Flaw (CVE-2025-5071): Critical Bug Allows Subscriber-Level Account Takeover

CVE-2025-4601: Flaw Exposes 33,000+ RealHomes WordPress Sites to Admin Takeover

• Vulnerability Report

CVE-2025-4601: Flaw Exposes 33,000+ RealHomes WordPress Sites to Admin Takeover

Do Son June 10, 2025 0

A critical Privilege Escalation vulnerability has been disclosed in the RealHomes WordPress theme, a popular real estate...

Read More Read more about CVE-2025-4601: Flaw Exposes 33,000+ RealHomes WordPress Sites to Admin Takeover

New WordPress Malware Masquerades as Legit Plugin with Data Exfiltration and RCE Capabilities

• Malware

New WordPress Malware Masquerades as Legit Plugin with Data Exfiltration and RCE Capabilities

Do Son June 4, 2025 0

The Wordfence Threat Intelligence team has uncovered a deceptive and highly persistent WordPress malware variant that disguises...

Read More Read more about New WordPress Malware Masquerades as Legit Plugin with Data Exfiltration and RCE Capabilities

82,000+ WordPress Sites at Risk: TheGem Theme Vulnerabilities Allow Full Site Takeover

• Vulnerability

82,000+ WordPress Sites at Risk: TheGem Theme Vulnerabilities Allow Full Site Takeover

Do Son May 14, 2025 0

In a recent disclosure by Wordfence, two serious vulnerabilities have been discovered in TheGem, a popular premium...

Read More Read more about 82,000+ WordPress Sites at Risk: TheGem Theme Vulnerabilities Allow Full Site Takeover

SureTriggers Vulnerability Exposes 100,000+ WordPress Sites to Admin Takeover

• Vulnerability

SureTriggers Vulnerability Exposes 100,000+ WordPress Sites to Admin Takeover

Do Son April 10, 2025 0

A critical vulnerability in the popular WordPress automation plugin SureTriggers has exposed over 100,000 sites to the...

Read More Read more about SureTriggers Vulnerability Exposes 100,000+ WordPress Sites to Admin Takeover

WordPress Phishing Scam Exploits Fake CVE-2023-45124 Vulnerability

• Malware

WordPress Phishing Scam Exploits Fake CVE-2023-45124 Vulnerability

Do Son December 2, 2023 0

In the ever-evolving world of cybersecurity, vigilance is paramount. Recently, a cunning phishing scam has emerged, targeting...

Read More Read more about WordPress Phishing Scam Exploits Fake CVE-2023-45124 Vulnerability